simplifying permissions logic